Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
File:                     3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier:          zxuFCHqYntP0tUO7cdw2wVhD4avGubZLDOEj7q1fvV0=
Subject key identifier:   1D:4F:28:18:E2:03:D6:97:A3:2C:71:EA:CF:34:04:45:55:94:FB:D3
Certificate issuer:       /CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
Certificate serial:       083377017EBBDF70BE8B495C9FAB4EFD6E2FB695
Authority key identifier: B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa
Signing time:             Mon 29 Jan 2024 14:36:00 +0000
ROA not before:           Mon 29 Jan 2024 14:31:00 +0000
ROA not after:            Mon 27 Jan 2025 14:36:00 +0000
asID:                     268097
IP address blocks:        131.108.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:33:77:01:7e:bb:df:70:be:8b:49:5c:9f:ab:4e:fd:6e:2f:b6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
        Validity
            Not Before: Jan 29 14:31:00 2024 GMT
            Not After : Jan 27 14:36:00 2025 GMT
        Subject: CN=1D4F2818E203D697A32C71EACF3404455594FBD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:ad:07:6e:e4:31:49:e5:63:31:ff:ac:2b:
                    2f:c3:eb:2e:9f:c3:3b:e2:33:12:b5:09:62:c4:60:
                    be:75:41:49:60:47:44:20:29:08:26:32:26:75:ac:
                    72:83:d1:3e:dc:83:40:71:66:42:ea:33:1e:37:d5:
                    db:a4:02:62:f0:7a:08:c8:a6:01:20:23:7a:d2:99:
                    9a:74:61:ca:e6:15:8e:c3:df:25:9a:02:34:b0:f1:
                    60:b8:d6:c5:36:cc:e7:76:06:36:5b:97:93:85:f7:
                    be:47:8c:02:f2:4f:ff:61:a3:8e:ed:97:28:f6:c0:
                    95:82:41:59:5b:06:60:51:de:f6:26:9f:26:cf:5f:
                    0e:1c:87:18:4f:21:c4:96:1b:55:b7:64:40:ba:b5:
                    d3:7a:06:ea:3d:96:2e:45:1d:6c:ad:c5:90:36:81:
                    23:6d:f5:aa:fa:94:d8:04:9a:0a:b0:48:6e:31:90:
                    01:b8:d5:bb:81:c3:0a:cc:d3:23:5c:17:d2:51:23:
                    d1:9b:80:30:6b:ec:26:27:17:e5:bb:2d:04:25:d1:
                    1d:a5:06:17:b0:4d:fd:e2:6d:9c:aa:bb:b9:46:a7:
                    a8:b2:9c:a3:4b:1c:a0:c3:17:d0:20:68:5b:d2:aa:
                    b1:30:60:48:b2:89:52:c9:fc:89:b2:eb:17:3a:8f:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4F:28:18:E2:03:D6:97:A3:2C:71:EA:CF:34:04:45:55:94:FB:D3
            X509v3 Authority Key Identifier:
                keyid:B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/3133312e3130382e38382e302f32322d3234203d3e20323638303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:b9:cc:07:1f:0f:5e:09:d7:b7:f1:0f:f2:b8:a4:1e:05:7b:
         23:2c:61:67:9b:7a:27:71:0c:82:f1:8d:fe:40:0c:19:39:2d:
         c9:57:43:a9:79:e6:31:94:99:bc:28:c5:f9:7d:e5:4c:22:70:
         6f:87:ed:08:f6:7c:c1:62:6b:74:82:c5:5c:d0:3d:e4:5c:4e:
         25:be:db:7e:3e:5e:36:c7:d8:16:ee:c4:23:a0:42:cb:bf:c3:
         49:ef:0d:dc:aa:1f:74:fb:a2:b2:7f:53:37:e2:6b:0c:01:b4:
         6f:75:7a:5a:0f:b5:84:43:3f:83:e2:d1:bd:15:48:e3:52:96:
         d0:3e:86:c4:87:f7:f4:e6:8a:12:8e:22:b2:ab:90:7e:21:43:
         56:d9:ec:4b:3d:62:f1:5c:cf:f0:ef:f6:c1:76:64:a6:8a:9d:
         64:de:49:dd:5c:a4:e7:00:30:3f:01:5e:ee:4f:43:41:82:56:
         99:11:d6:2b:92:e1:5c:f7:ea:50:bd:be:89:0e:25:56:c5:67:
         1c:81:60:ec:7f:21:fd:3e:ea:d4:c3:ce:90:b6:34:64:74:9d:
         ec:b9:c6:4e:44:9c:e9:01:f4:a7:0c:7d:b6:8a:e5:31:e9:66:
         13:90:91:8f:8d:1c:09:54:d7:16:36:28:a7:52:b7:92:ef:8b:
         5e:b4:7d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org